$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: 4zwNa/UbgYiLCaZ9Ba/CbBsBHptpNxKMfesSszZCwvI= Subject key identifier: CF:22:60:8C:08:E2:2D:CD:E3:B5:D8:DF:D7:92:58:D6:7C:20:6E:1E Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 04BC Signing time: Tue 04 Nov 2025 23:58:34 +0000 Manifest this update: Tue 04 Nov 2025 23:58:33 +0000 Manifest next update: Tue 11 Nov 2025 23:58:33 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: w95xBZbTn3MSxHNErR/MKm5z5weD5/k7xjLMRBZyjHA=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: FXBB9DdsLSCSLqmcy5GfEeeUEH9NAw4i9aMiOHO8iOI=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: vrgdHN+EQa1Kq7q/Jj9Y5Q0FA9lEQE1lA2kxOo5yBEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Nov 4 23:58:33 2025 GMT Not After : Nov 11 23:58:33 2025 GMT Subject: CN=690a9329-cb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:4f:bb:b2:3d:de:a5:07:eb:41:f4:d7:ea: ba:4b:e5:13:ed:d4:4d:12:35:8e:08:d2:42:a5:e6: 55:b4:e8:84:2a:15:19:1f:a7:3c:a1:e5:68:16:fc: 01:cd:dc:c9:31:36:9e:cb:a9:82:8d:43:d9:8e:3e: b4:00:e0:cc:82:e2:fe:d8:96:41:b5:00:5c:f6:63: 4e:ea:7d:3b:22:8a:ab:55:25:94:3f:ef:02:20:d4: 55:fb:ca:52:62:cf:72:46:76:3f:26:ae:f2:b4:e0: be:44:07:67:b3:7e:c6:49:a8:af:6b:83:a6:52:c3: a5:c5:d1:d2:cd:9d:f8:d0:b8:1c:a0:b3:8d:79:d5: 5a:e0:e9:fe:db:8e:13:e9:0b:d8:a1:e8:a2:aa:cd: ee:f6:83:a7:11:8a:b4:05:83:fd:d9:a6:b4:bb:78: 59:4f:17:81:7e:0f:2c:1b:c9:a2:38:d6:3b:2d:28: 26:97:66:61:62:be:cb:d8:68:7a:2d:b5:3d:ef:07: 5b:f3:c1:88:10:4e:1d:1f:f9:df:1a:73:59:cd:18: 63:02:a2:73:5b:aa:d1:06:45:4e:e6:6e:3b:28:4b: 4a:5c:09:5f:e8:da:ec:e2:65:b9:bf:a7:4c:53:c1: 85:e1:7a:b8:2d:27:53:09:20:e7:7b:1e:64:2c:d4: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:60:8C:08:E2:2D:CD:E3:B5:D8:DF:D7:92:58:D6:7C:20:6E:1E X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ae:75:ca:c6:a4:a4:13:62:d3:3c:b5:94:2e:4f:08:b2:8d: a0:83:5c:e8:fd:05:6c:a4:fa:41:fe:df:ce:f4:02:c3:5c:54: 76:25:ac:be:61:73:23:f4:29:54:1a:9e:2f:93:96:0a:f6:99: 25:66:cb:a7:53:4e:7a:f1:58:cb:b2:70:98:3f:a7:bb:7b:69: 9d:8f:50:f2:ee:98:34:86:d1:d7:62:0d:e3:15:76:ff:93:75: b8:d8:25:7e:40:cd:e0:f4:f3:b7:a4:b9:50:6f:89:69:40:ad: 79:62:54:ae:5d:46:e2:2b:4f:f8:a6:89:c7:21:c6:00:b4:95: 13:6c:6f:16:16:06:9c:34:07:bb:66:a4:17:3b:7d:21:09:a9: 05:09:c2:64:e6:0d:e2:fe:c4:56:93:a8:3b:7f:2c:3a:59:b9: 09:03:d4:96:17:49:b8:3b:1e:bc:ce:a3:cc:71:da:f6:90:80: fb:c6:49:00:e9:7a:02:0c:94:44:b4:ca:43:a7:10:69:f4:78: e6:80:51:f3:11:10:f6:21:64:a2:3b:1f:fb:c7:c9:a2:28:60: 82:c8:c4:29:bc:41:4a:c0:27:fe:10:5f:ea:89:71:5d:c9:d8: 60:9c:45:8f:82:75:37:f7:75:1b:1a:3b:8e:b9:f7:7f:3c:9d: ff:6c:6c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUxMTA0MjM1ODMzWhcNMjUxMTExMjM1ODMzWjAYMRYwFAYD VQQDEw02OTBhOTMyOS1jYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eFPu7I93qUH60H01+q6S+UT7dRNEjWOCNJCpeZVtOiEKhUZH6c8oeVoFvwB zdzJMTaey6mCjUPZjj60AODMguL+2JZBtQBc9mNO6n07IoqrVSWUP+8CINRV+8pS Ys9yRnY/Jq7ytOC+RAdns37GSaiva4OmUsOlxdHSzZ340LgcoLONedVa4On+244T 6QvYoeiiqs3u9oOnEYq0BYP92aa0u3hZTxeBfg8sG8miONY7LSgml2ZhYr7L2Gh6 LbU97wdb88GIEE4dH/nfGnNZzRhjAqJzW6rRBkVO5m47KEtKXAlf6Nrs4mW5v6dM U8GF4Xq4LSdTCSDnex5kLNSb9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8iYIwI 4i3N47XY39eSWNZ8IG4eMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlrnXKxqSkE2LTPLWULk8Iso2gg1zo/QVspPpB/t/O9ALDXFR2Jay+ YXMj9ClUGp4vk5YK9pklZsunU0568VjLsnCYP6e7e2mdj1Dy7pg0htHXYg3jFXb/ k3W42CV+QM3g9PO3pLlQb4lpQK15YlSuXUbiK0/4ponHIcYAtJUTbG8WFgacNAe7 ZqQXO30hCakFCcJk5g3i/sRWk6g7fyw6WbkJA9SWF0m4Ox68zqPMcdr2kID7xkkA 6XoCDJREtMpDpxBp9HjmgFHzERD2IWSiOx/7x8miKGCCyMQpvEFKwCf+EF/qiXFd ydhgnEWPgnU393UbGjuOufd/PJ3/bGzh -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:58 2025 by rpki-client